At D2L, we take security and privacy very seriously. We act as a trusted partner, putting our client’s security and data confidentiality, availability and integrity first. Following a privacy-by-design approach across the full product lifecycle, our process is globally recognized with certifications that validate how we protect sensitive learner and institutional data.
La confidentialité, la sécurité, la résilience et l’assurance basée sur les normes sont intégrées à D2L Brightspace dès le départ.
Premier SGA majeur
Premier SGA majeur à obtenir la certification ISO 27001.
Certification continue
Certification ISO 27001 continue depuis 2014, reflétant plus d’une décennie de maturité éprouvée du programme de sécurité.
Certification des partenaires
Première plateforme d’apprentissage à offrir une certification partenaire conjointe avec 1EdTech.
Portefeuille ISO
Portefeuille complet de certifications ISO couvrant la sécurité, les contrôles en nuage et la confidentialité.
La confidentialité et la sécurité sont intégrées à D2L Brightspace dès le début.
Les plateformes d’apprentissage contiennent des informations extrêmement personnelles sur les apprenants, les enseignants et les organisations. D2L adopte une approche basée sur la confidentialité par conception pour aider à protéger ces informations tout au long du cycle de vie de nos produits et services, du développement et des tests aux opérations, au soutien et à l’amélioration continue.
D2L maintains a rigorous security and privacy program that is regularly assessed against recognized global standards. These certifications and assessments give customers a transparent way to evaluate how D2L manages security, privacy, cloud controls and data protection obligations.
Customers and prospects can review D2L’s available certifications and security documentation, including ISO/IEC 27701, ISO/IEC 27001, ISO/IEC 27018, ISO/IEC 27017, SOC reports, CSA STAR, TX-RAMP, and Internet2 Cloud Scorecard resources here.
For more information on D2L’s compliance with data privacy laws, including the GDPR and CCPA, please see resources here.
D2L uses layered technical, administrative and operational safeguards to protect D2L Brightspace and the data entrusted to us. These include secure connections using TLS, unique user sessions, logging of transactions and originating IP addresses, configurable session timeouts, password policies, delegated authentication support, secure logical separation of customer data and customer-controlled access settings.
These safeguards help organizations manage access, reduce unnecessary exposure and support their own privacy and security obligations.
Protecting learning means more than protecting records. It also means helping organizations maintain access to the systems learners, educators and administrators rely on every day. D2L Brightspace is designed with redundancy, scalability and disaster recovery capabilities to support service continuity and recovery.
D2L stores customer data in secure data centers and replicates it over secure links to a disaster recovery data center, helping support restoration of the D2L Brightspace service should the need arise.
D2L uses layered privacy and security safeguards across D2L Brightspace, including secure connections, session controls, logging, configurable access settings, logical data separation, employee training, security testing, and independent third-party audits. D2L also maintains certifications and assessments across recognized privacy, security, and cloud control standards.
D2L maintient des certifications et des évaluations, notamment ISO/IEC 27701, ISO/IEC 27001, ISO/IEC 27018, ISO/IEC 27017, des rapports SOC, CSA STAR, TX-RAMP et les ressources du tableau de bord Internet2 Cloud. Ceux-ci aident les clients à évaluer les contrôles et les pratiques de sécurité de D2L à l’aide de cadres reconnus.
For enterprise D2L Brightspace users, the customer organization typically acts as the controller of personal information, and D2L acts as a processor. D2L processes personal information under the controller’s instructions and for the controller’s purposes, while providing configurable privacy and security features to help customers manage access and protect data.
D2L Brightspace is designed with redundancy, scalability, and disaster recovery capabilities. Customer data is stored in secure data centers and replicated over secure links to a disaster recovery data center to help support service restoration in the event of a catastrophic event.
Veuillez envoyer les informations à [email protected].
